Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
File:                     6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa (raw, json)
Hash identifier:          jZZ0yWsUfCVqbU2KTrudawan4FFtuz1eF7y1OKVoaTI=
Subject key identifier:   34:F3:3D:24:DF:51:76:0E:95:F9:6F:62:B7:0F:A2:6B:3A:0F:8A:28
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1EE3B3DA3A64671ADD8285B8D3A107BEE23E6314
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa
Signing time:             Sat 28 Feb 2026 05:31:31 +0000
ROA not before:           Sat 28 Feb 2026 05:31:31 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e3:b3:da:3a:64:67:1a:dd:82:85:b8:d3:a1:07:be:e2:3e:63:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Feb 28 05:31:31 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=43b0b872d47553a238808bff530de27dad8d4191e5c09b4fb3faad520fb3d239, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:64:d3:94:b2:c8:f2:f6:db:8d:1b:1b:2a:
                    f7:a5:3e:1a:9a:4c:a3:ce:8e:64:64:a4:1c:1e:b8:
                    37:b3:6d:8f:60:d8:d6:ad:03:50:88:23:39:08:e0:
                    b1:8e:fc:06:e2:b3:cc:e7:fe:39:1a:55:90:89:4a:
                    d5:28:ec:3d:c1:e2:80:18:fe:5e:9c:c2:a2:66:5d:
                    8f:ca:9b:fe:dc:58:95:84:cc:84:e8:39:14:d0:ee:
                    8f:d3:f2:61:32:5e:59:d1:3f:17:d2:5d:cc:cf:30:
                    b7:a0:bd:dc:91:17:d9:13:e0:ed:48:eb:95:87:a3:
                    75:cd:68:98:ec:2a:c9:97:a2:d8:71:d1:fc:fc:d9:
                    90:d7:ed:99:88:84:03:d6:a9:5a:9b:a4:97:bb:98:
                    cd:e2:df:3b:b4:4a:3b:48:85:e0:77:76:b0:79:69:
                    5f:49:81:51:22:1a:00:e8:e8:fb:7b:f1:b3:49:53:
                    4a:57:24:e0:74:f0:98:be:77:42:1a:ee:39:4c:3f:
                    93:0b:74:45:76:ea:42:50:53:8a:80:13:6f:af:de:
                    55:b0:d5:46:ab:9d:47:6a:a8:14:9f:41:2b:cf:7a:
                    74:d0:d7:96:3b:ad:73:f9:b1:82:0a:3b:b5:74:0a:
                    a8:93:db:9d:d5:fe:63:08:e5:76:24:ff:33:89:13:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:3D:24:DF:51:76:0E:95:F9:6F:62:B7:0F:A2:6B:3A:0F:8A:28
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6f8d79c6-b773-4073-9ff4-2210e6a111b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:61:62:a4:b0:a9:da:da:fa:af:53:3e:d6:8b:24:a8:57:cd:
         34:c6:b7:85:39:e5:18:3f:b7:fb:b6:d4:af:e5:e3:b7:be:47:
         28:9c:b3:bd:4c:f7:af:6f:e4:42:04:f6:e5:c1:3c:69:41:39:
         eb:f0:36:e0:5d:9e:87:35:43:eb:18:22:4b:e1:be:ef:df:cb:
         0d:6d:4a:ba:58:22:b2:71:d9:50:e5:00:3f:3e:3a:55:e9:6c:
         42:29:8e:2d:9b:95:e6:cb:d3:66:e6:32:af:ee:36:26:e1:af:
         41:83:76:25:bc:60:2d:36:ff:e0:8c:29:1a:b4:50:d9:bd:ec:
         81:2c:40:b8:07:9f:e4:cc:5e:cd:a1:2f:bd:a2:05:1c:5d:1b:
         64:02:f5:c7:f7:86:73:f0:f2:10:c6:30:47:ea:77:ff:ef:02:
         22:56:2f:11:59:19:e7:c8:a4:e6:ea:c3:c7:36:f3:dc:eb:e8:
         81:83:28:5f:6b:d6:77:06:3f:c4:a7:18:79:f7:cf:a3:37:fc:
         46:fc:7e:bc:9e:ed:bc:d6:f1:44:94:29:23:38:c9:19:e6:12:
         38:d0:1e:76:a0:5c:f0:29:61:8b:f0:0f:a6:59:16:ea:08:34:
         80:22:06:bb:90:87:7f:a4:b5:c0:96:a3:08:a9:4b:9d:53:c6:
         3e:22:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----